Privacy Policy

Nova Labs · Meta application · Last updated: 22 September 2026

This Privacy Policy explains how Nova Labs ("we", "us") handles information when you interact with our application and with the Instagram and Facebook accounts we operate and manage.

1. Information we process

Through the official Meta APIs (Instagram Graph API / Facebook Graph API), our application processes:

• Public comments on posts belonging to the accounts we manage — the comment text, comment ID and timestamp;
• The commenter's public Instagram username and public profile identifier;
• Post and media identifiers needed to locate the comment;
• Basic account and page identifiers required to authenticate our own accounts.

We do not collect passwords, private messages, payment data, or any data that is not exposed through the Meta APIs we are authorised to use.

2. Why we process it

• To send automated replies to comments, such as answering questions or sharing a link the commenter asked for;
• To measure engagement and performance of our own content;
• To prevent duplicate or abusive processing (for example, never replying twice to the same comment).

3. Legal basis and consent

We process this information on the basis of our legitimate interest in operating our public social media accounts and communicating with people who interact with them, and, where required, on your consent as expressed by your interaction.

4. Sharing

We do not sell, rent, or trade your information. Data is transmitted to and from Meta Platforms, Inc. as the provider of the APIs. Our own processing and storage runs on infrastructure controlled by us.

5. Retention

Records of processed comments are kept only as long as necessary to operate the feature — typically to avoid duplicate replies and to keep a short audit history. We delete them when they are no longer needed, and sooner if you ask us to.

6. Your rights

You may request access to, correction of, or deletion of the information we hold about you. See our Data Deletion Instructions page, or email us directly. We respond within 30 days.

7. Security

Access credentials are stored in encrypted, access-restricted storage. We use least-privilege permissions and rotate credentials periodically.

8. Children

Our application is not directed at children under 13, and we do not knowingly process their data.

9. Changes

We may update this policy. Material changes will be reflected by the "Last updated" date at the top of this page.

10. Contact

Questions or requests: arden_yos@yahoo.com